Job Description

Strength. Care. Growth

Did you know that A1 Bulgaria is working on international projects as well?

Our wide portfolio has long past the telecom services, and we are now offering digital solutions to millions of corporate, public, and private customers.

State-of-the-art technology, the latest innovations, and extremely talented professionals in various areas help us deliver the best-in-class products, services, and customer experience.

You’ll know A1 Bulgaria is the right place for you if you are driven by:

• Opportunities to learn and build your career.
• Meaningful work in a stable and fast-paced company.
• Diversity of people, projects, and platforms.
• A supportive, fun, and inspiring place to work.

Nadia Ivanova - Spasova is looking for a new team member.

Would you like to join us?

Your daily routine would include:

• Monitoring customer environments for security threats, suspicious activities, and policy violations.
• Analyzing and triaging security alerts generated by SIEM, EDR/XDR, network, cloud, and other security technologies.
• Investigating security incidents and determining their severity, impact, and business relevance.
• Distinguishing between true positive and false positive alerts and taking appropriate actions.
• Escalating validated incidents to customer security teams according to agreed procedures and SLAs.
• Communicating incident details, recommendations, and investigation results to customers in a clear and professional manner.
• Correlating information from multiple data sources to identify malicious activity and emerging threats.
• Supporting incident response activities and providing investigative assistance when required.
• Documenting investigations, findings, and response actions within ticketing and case management systems.
• Contributing to threat hunting, detection improvements, use case development, and SOC process optimization.
• Collaborating with international colleagues, customers, and technology partners to improve overall security posture.

We’ll know you can make it if you have:

• Experience in a Security Operations Center, Managed Security Services, Incident Response, or related cybersecurity role.
• Understanding of cybersecurity threats, attack techniques, and incident handling processes.
• Experience working with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar technologies.
• Familiarity with EDR/XDR solutions, Microsoft Defender, network security monitoring, and cloud security services.
• Strong investigative and analytical skills with the ability to assess and prioritize security events.
• Experience working in a customer-oriented environment and communicating technical findings to different audiences.
• Ability to work efficiently under pressure and manage multiple incidents simultaneously.
• German language proficiency at C1 level or native speaker(mandatory).
• Strong English communication skills.

Our gratitude for the job done will be eternal, but we’ll also offer you:

• Innovative technologies and platforms to “play” with.
• Modern working environment for your comfort.
• Friendly, ambitious, and motivated teammates to support each other.
• Thousands of online and in-person learning opportunities to grow.
• Challenging assignments and career development opportunities in multinational environment.
• Attractive remuneration package.
• Flexible working schedule and opportunity for home office.
• Numerous additional goodies, including, but not limited to free A1 services, discounts, health insurance and services, sports center, childcare, team and family events, etc.

Not sure yet? See us in action in our A1 Blog.

Any questions? Contact Svetlina Vazharova.

Sounds good? Apply now!

Only shortlisted candidates will be contacted.